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This paper introduces an analytical approach, Probability and Confidence Trade-space 
(PACT), which can be used to assess uncertainty in International Space Station (ISS) 
hardware sparing necessary to extend the life of the vehicle. There are several key areas 
under consideration in this research. We investigate what sparing confidence targets may be 
reasonable to ensure vehicle survivability and for completion of science on the ISS. The 
results of the analysis will provide a methodological basis for reassessing vehicle subsystem 
confidence targets. An ongoing annual analysis currently compares the probability of 
existing spares exceeding the total expected unit demand of the Orbital Replacement Unit 
(ORU) in functional hierarchies approximating the vehicle subsystems. In cases where the 
functional hierarchies’ availability does not meet subsystem confidence targets, the current 
sparing analysis further identifies which ORUs may require additional spares to extend the 
life of the ISS. The resulting probability is dependent upon hardware reliability estimates. 
However, the ISS hardware fleet carries considerable epistemic uncertainty (uncertainty in 
the knowledge of the true hardware failure rate), which does not currently factor into the 
annual sparing analysis. The existing confidence targets may be conservative. This paper 
will also discuss how confidence targets may be relaxed based on the inclusion of epistemic 
uncertainty for each ORU. The paper will conclude with strengths and limitations for 
implementing the analytical approach in sustaining the ISS through end of life, 2020 and 
beyond. 
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I. Introduction 

The International Space Station (ISS), as shown in 
Figure 1, was originally designed to operate until 
2015. Currently, the international partnership has 
agreed to extend operations until 2020 and have 
further agreed not to take any actions that would 
prevent extending the mission beyond 2020. Each 
international partner is responsible for the 
sustaining engineering, sparing, and maintenance of 
their own segments. The National Aeronautics and 
Space Administration’s (NASA’s) challenge is to 
provide sufficient resources to maintain the 
functional availability of the ISS systems in the 
United States On-Orbit Segments (USOS). 

Prior to retirement of the Space Shuttle, spares 
had already been purchased and in many cases pre- 
positioned on-orbit to meet the critical ISS 
maintenance requirements through the previously 
expected end of life of 2015. However, with the 
ISS operating to an uncertain date in the future, the Program will now be in a continuous sustaining effort to extend 
the life of the ISS. This sustaining effort must succeed in a highly resource constrained environment (supply 
vehicles, crew-time, spares quantities, and budget are all potentially constraining). While long lead times may 
suggest the advisability of early decision-making (to procure additional maintenance spares), experience suggests 
that such decisions should be delayed as long as it is reasonable to do so. Delaying procurement decisions allows the 
program to gather additional performance data on the ISS components and spares and thus make better decisions. 
When assessing maintenance demands, the Program considers that some graceful degradation of functional 
redundancy may be acceptable near end of vehicle life. 

The methodology for assessing spares requirements for maintenance is continuously reviewed and improved. 
One area that has not previously been quantified in maintenance analysis is the epistemic uncertainty inherent in the 
reliability estimates for the ISS hardware. While this risk has been implicitly understood, its impact had not been 
explicitly included in the maintenance assessments. 

This paper introduces application of an analytical approach to assessing this epistemic uncertainty in component 
or sparing reliability rates of ISS hardware necessary to extend the life of the vehicle. For a given component or 
group of components or spares, we look at trading a target probability of sufficient spares with the confidence in that 
target probability. This paper will conclude with strengths, limitations, and future challenges for implementing the 
analytical approach, Probability and Confidence Trade-space (PACT), for use in sustaining the ISS vehicle. 

II. Key Concepts and Definitions 

The following sub- sections will briefly define uncertainty and other key definitions that will be used in other 
sections of the manuscript. 

A. Sources of Uncertainty 

Uncertainty can be categorized as two distinct types: aleatoric and epistemic. 

Aleatoric (or stochastic) uncertainty is indicative of natural, intrinsic randomness (variability) in a physical 
process. Aleatoric uncertainty cannot be suppressed by more accurate measurements and is irreducible uncertainty 
( 1 ). 



Figure 1. Overall View of ISS. Figure shows overall view of 
the International Space Station (ISS) taken as the shuttle 
Endeavour departed at the end of the STS-134 mission (6). 


Epistemic uncertainty (or reducible uncertainty) is due to a lack of knowledge (or data) about the processes, 
models, parameters (e.g. failure rate), and behavior used in the analysis. “Failure rates are uncertain, sometimes 
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because failure information is sparse or unavailable, and sometimes because the very applicability of available data 
to the case at hand may be in doubt (1).” Only epistemic uncertainty is reducible through operational experience. 

It is important that both natural variability of physical processes (i.e., aleatory or stochastic uncertainty) and the 
uncertainties in knowledge of these processes (i.e., “epistemic” or state-of-knowledge uncertainty) are properly 
accounted for (1). In practical applications, both kinds of uncertainties are almost always present. 

B. Model Parameters 

Confidence is a measure of the fidelity of an estimate. Confidence indicates the soundness of the estimate. 
However, confidence does not predict the true value of a parameter. 

Error Factor (EF) is the ratio of the upper 95th percentile to 50th percentile (median) in a lognormal 
distribution. Greater values of the EF correspond to a wider distribution and greater uncertainty. A narrow 
distribution, as EF approaches one, implies more confidence. 

Operational Failure Rate is the expected number of inherent failures of a part (or ORU) during operation per 
unit time. The operational failure rate is determined by Bayesian analysis using original reliability predictions, 
observed operating time and failure history, and assumed Error Factor. 

Probability of Sufficiency (POS) is the likelihood that sufficient spares exist to repair all failures. “Whenever 
possible, the specific spare parts and quantities proposed should be based upon probabilistic equations using 
parameters such as predicted/designed consumption rates, available empirical data, engineering estimates of 
predicted use of the spare parts, and the overall probability of sufficiency (POS) assumed . . . POS is the probability 
that the spare parts will be available when needed (2).” 

Confidence Target is the desired confidence in POS value. Confidence assesses the uncertainty around the POS. 
For instance, instead of saying that the POS is 90% for a given Orbital Replacement Unit (ORU), one can say for 
example that there is a 50% chance that the POS is at least 90%. This added dimension gives insight into the 
uncertainty of calculations. Confidence is expressed as a percentage where 100% implies total certainty or full 
confidence. 


III. Uncertainty and Risk in ISS Maintenance Projections 

How many equipment failures will the ISS experience this year? How many over its lifetime? Which equipment 
will fail? When will it fail? What is the lifetime of the ISS? 

These are the questions that must be answered in order to safely and successfully sustain the orbiting complex of 
laboratories, environmental systems and utility systems that comprise the ISS. 

Fundamentally, every project, plant, business, etc., faces the same sorts of questions. ISS faces some unique 
challenges, among them: Unique hardware, small populations, challenging delivery channels, harsh environments, 
limited storage space, and limited crew time to perform repairs. 

ISS Fogistics and Maintenance (F&M) has taken a sparing approach that aggressively protects for success 
through end of life (currently assumed to be 2020, though analysis through 2028 has been performed) in an annual 
Sparing Analysis. ORU failure rates are based on both original predictions using MIF-STD 217 (3) and operational 
experience (via Bayesian analysis). Monte Carlo simulations distribute failures around a range of values assuming 
an exponential distribution and are used to project failure impacts across vehicle life. A large number of simulations 
are performed (typically 1000); confidence that the vehicle systems meet at least minimum required functional 
targets is determined by counting the percentage of the total simulations that meet or exceed the target minimum 
configuration. Spares are deemed sufficient when the confidence percentage meets or exceeds a specified confidence 
target. Historically, these targets have been conservative, ranging between 85% and 99.5%. 


3 

American Institute of Aeronautics and Astronautics 



This approach represents the natural variability present in hardware reliability; that is the inherent, or aleatory, 
uncertainty that is present when evaluating failure projections and spares sufficiency. This inherent uncertainty 
persists regardless of increases in knowledge; it is not reducible. 

This approach includes an implied assumption that the failure rate estimate used in simulation is the true failure 
rate of the equipment. In reality, there is also uncertainty as to the true value of the failure rate. This represents a 
primary source of epistemic uncertainty (uncertainty due to incomplete knowledge). Epistemic uncertainty is 
reducible with increased knowledge. For ISS ORU failure rates, this increased knowledge derives from operating 
experience (as opposed to life testing that might be performed for equipment that is less expensive or more widely 
used). 

Due to the small populations, as well as uniqueness of the hardware and operating environment, there is 
significant uncertainty in determining true failure rate. Current methods bound the failure rate estimates, but the 
bounds are not taken into account in the simulations and calculations. Upper and lower bounds are characterized by 
an error factor. Initial error factors were assumed program wide (to be equal to 4). The application of Bayesian 
analysis to the predicted failure rate and observed operating experience (operating hours and failure history) results 
in an improved estimate of failure rate and reduces epistemic uncertainty to the extent that operating hours and 
failure history increase knowledge. 

Outputs of the Bayesian update process also include a posterior error factor. A decreasing posterior error factor 
quantifies the extent to which epistemic uncertainty has been reduced. The error factor also impacts the size and 
shape of the trade space of sufficiency and confidence (this will be illustrated in a later section). Note that some 
uncertainty remains for any error factor other than one (where error factor equal to one represents complete certainty 
of the true failure rate, and is not realistically attainable). 

There may also be other sources of epistemic uncertainty in the failure distribution. For example, the actual 
distribution may not be exponential. Also, as yet undiscovered wear-out modes may exist that might influence the 
failure distribution. 

The calculated confidence numbers of the current methodology can thus be shown to be incomplete since they 
do not take into account epistemic uncertainty. In the past, this has driven high targets to compensate. If confidence 
is determined by taking into account both aleatory and epistemic uncertainty, then less extreme targets may be 
acceptable and still support successful maintenance of the ISS through end of program life. 

IV. Overview of Current Approach to Sparing Assessments 

The current practice for the ISS sparing assessments is a combination of quantitative analysis and engineering 
judgment annual assessment involves intense coordination among engineering teams and program boards. The 
Fogistics & Maintenance (F&M) office in the Vehicle directorate at Johnson Space Center sponsors this activity. 
The findings from a sparing assessment have wide application, from supplementing periodic Original Equipment 
Manufacturer decision packages, to supporting Government Accountability Office audit (4). The assessment gives 
indication of the risk in supporting the vehicle life. 

As of 2011, the F&M annual sparing assessment models approximately 30 vehicle sub-systems (for example 
thermal control, guidance and navigation, environmental control and life support), which comprises approximately 
300 unique ORUs. Roughly half of the sub-systems are modeled as groups of ORUs with hierarchal operation 
through vehicle life in a discrete event simulation tool. These functions are subject to a confidence target. Where the 
ORU does not meet a level availability to provide for the function- wide target at minimum configuration, additional 
ORU spares are identified. Alternatively, the remaining sub-system ORUs are modeled as stand-alone hardware 
where the failure of one ORU does not impact the operation of any other hardware. These ORUs are subject to target 
thresholds for determining additional spares as well, but with a simpler approach to measure ORU availability. This 
sub-set of ORUs will be used to describe the process of identifying appropriate sparing for the entire population as 
the process can be applied to the entire population. Figure 2 illustrates the current process flow. 
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Figure 2. Current Process Flow. Figure shows flowchart for the current process flow used to obtain the ORU Probability 
of Sufficiency (POS). The posterior error factor is not input in the Poisson Process. 

Underlying the sparing assessment is a Bayesian update process on the ORU failure rates. The ISS specific 
application of Bayesian inference updates the predicted ORU failure rate (prior) given operational experience 
resulting in an operational (posterior) ORU failure rate. Operational experience is defined as the time (e.g. number 
of hours) an ORU has been activated and the number of random failures observed. A prior and posterior error factor 
(EF) are parameters to the Bayesian update process. The EF weighs ORU operational experience against the 
predicted ORU failure rate. The ISS Program currently uses a prior EF equal to four. The process flow chart (Figure 
2) indicates that the operational ORU failure rate is then used as input into a Poisson process. This is a statistical 
technique based on the cumulative Poisson probability distribution estimating the probability that ORU failures in a 
projected time period do not exceed the number of ORU spares. Hence, we are provided an indication of the ORU 
probability of sufficiency (POS). This estimate is compared against an arbitrary target probability that varies from 
ORU to ORU, function to function. Conceptually, the POS estimate can be represented as a single dimensional 
value, ranged 0-100%, at a given point in time, compared to a desired target, as shown in Figure 3. The Poisson 
process is not equipped to define the confidence in an ORU POS value. Instead, we infer absolute confidence in the 
estimate. 
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Figure 3. Current Model of ISS Sparing Risk. Figure shows graphical interpretation of the current sparing approach. 


This process has proven useful, for it distinguishes an area of ‘Accepted Risk’ in the ORU sufficiency at a given 
point in time, and an area of ORU sufficiency, with probability value n% as shown in Figure 3. This provides insight 
for risk informed decision making. 

Figure 3 includes a straight line cutting through the probability/confidence region. Confidence along this line can 
be interpreted as absolute; POS is independent of confidence. This is a limitation in the current practice. With 
modification of the process, the region can be used to display the epistemic uncertainty in ORU failure rates. 
Intrinsic to every POS estimate there is epistemic uncertainty in the ORU failure rate that the Poisson process does 
not capture. This uncertainty can be represented as a confidence in the probability estimate. The confidence allows a 
second dimension to be quantified as shown in Figure 5 of the following section. 

We demonstrate this approach with a generic standalone ORU; its failure rate 1.00E-5, a projected time period of 
9 years, and its baselined number of spares, 1. This example can be replicated in Excel or using most statistical 
software. 

Given these input parameter values, the ORU POS is 81% through 9 years. If we were to consider meeting a 
target desired by the program in that time frame of 95%, one additional spare would be indicated in the assessment. 
Importantly, this number is typically not used as a procurement recommendation. Other factors are considered such 
as budget, procurement lead-times, manifest constraints, and repair capability. The ISS Spares Assessment is a 
coordinated effort involving many stakeholders such as engineering experts, suppliers, and program management. 
Since we have uncertainty in the ORU failure rate, a fundamental input to the model, various considerations 
accommodate risk mitigation postures that could initiate operational strategies, redesign work, or prioritization on 
return flights to support ORU, function and ultimately, vehicle configuration through end of life. 
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V. Overview and Discussion of the Proposed Approach 

By including epistemic uncertainty, we construct a more complete model. 

Figure 4 illustrates modifications to current practice which allows us to do so. This approach is called Probability 
and Confidence Trade-space (PACT) Evaluation. 



Figure 4. PACT: Proposed Process Flow. Figure shows flowchart for the current process flow used to obtain the ORU 
Probability of Sufficiency ( POS ) and confidence in the probability estimate. 


In PACT work flow, the Bayesian update process remains unchanged. However, the posterior EF is now 
integrated into a Lognormal process. The Lognormal process is a statistical technique similar to the Poisson process 
but includes an additional parameter (EF) for determining the distribution variance in ORU failure rate. 

Higher EF values reflect higher levels of uncertainty in the ORU failure rate; whereas lower EF values will 
narrow the distribution variance, thus reflect greater certainty. This added parameter allows for variation in the level 
of confidence in the ORU POS and thereby accounts for the epistemic uncertainty in the ORU failure rate. 

C. PACT Trade Space Regions 

The regions that describe current sparing risk; accepted risk and sufficiency, are no longer linear. The probability 
of sufficiency is no longer a straight line; it is now a curve. Furthermore, the space includes more nuanced regions: 
1) The area of Sufficiency, 2) The area of Previously Accepted Risk, 3) the Area of Previously Accepted Risk that is 
now ‘sufficient’, and 4) The area of previously unidentified epistemic uncertainty. Figure 5 compares PACT 
Evaluation to the current approach (see Figure 3) in the Probability/Confidence trade-space. 


7 

American Institute of Aeronautics and Astronautics 



100% 


Previously Accepted 
Risk "Now Sufficient" 

Previously Accepted Risk 




Previously Unidentified 



^^Epistemic Uncertainty 


Sufficiency 



25% 50% 

Quantified Confidence in POS 


Figure 5. PACT Model of ISS Sparing Risk. Figure shows graphical interpretation of the PACT sparing approach and 
trade space. 

Using PACT Evaluation results in a range of POS values with corresponding confidence values. Figure 6 shows 
the PACT Evaluation results using the generic ORU example presented in Section IV. The ORU POS values are 
plotted on the y-axis and corresponding confidence levels are plotted on the x-axis. For example, recall that under 
the Poisson process approach we estimate the ORU POS to be 81% through 9 years. In Figure 6 we see that when 
accounting for epistemic uncertainty using PACT evaluation we are approximately 70% confident in that estimate. 
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Figure 6 Generic ORU Example. Figure shows graphical application of the PACT evaluation on a generic ORU. 


D. Interpretation of Trade Space Regions 

With this knowledge, we can assess the tradeoff along the curve between the desired ORU POS value and our 
confidence in that value. For a sparing assessment this tradeoff can be summarized with two options based on 
quantitative assessment: 

1) We may accept the probability and our confidence as is, 

2) We may relax our confidence for a higher desirable POS value, or we may consider a lower desirable POS 
value in favor of having higher confidence. 

Alternately, we may influence the ORU POS and confidence estimates by assuming additional spares (through 
procurement or repair of failed units) or by changing the projected horizon time for the analysis. 

The last option has a unique implication. The current spares assessment approach has fixed thresholds 
throughout vehicle life. Since we can now control confidence levels through PACT Evaluation, we are in a position 
to acknowledge lower certainty with time with our knowledge of the ORU ‘true’ failure rate and thereby accept 
lower confidence levels at later stages of a projection. 
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Figure 7 illustrates the point using the generic ORU as example. This graph shifts the x-axis to time and displays 
the resulting confidence in a fixed POS value, 90%. It is evident that our confidence in the POS estimate is higher in 
the near-term versus projected end of life scenarios. This dynamic becomes a key issue in discussions for adopting 
PACT Evaluation in future sparing assessments in the ISS program, topic of Section VI. 


ORU POS by year, WITH 90% CONFIDENCE 



Figure 7. Generic ORU time-series example. Figure shows ORU POS 2012-2028 if we were want to maintain 90% 
confidence in that estimate. 


E. Case Study Results 

Six ORUs, representing a variety of ISS supportability challenges/risk imparting sparing levels, were selected for 
a case study to validate the usefulness of PACT. The six ORUs are shown in Appendix A. Analysis of the six ORUs 
demonstrates a breadth of uncertainty; empirical basis of ORU failure rate demonstrated versus lack of operational 
experience. The results for the ORU case studies can be seen in Appendix A. 


VI. Application of PACT Evaluation for Revising ISS Sparing Confidence Targets 

The current approach to ISS sparing analysis protects for the epistemic uncertainty in the ORU failure rate by 
adopting high confidence targets. These targets range from 85% to above 99%. The primary disadvantage of this 
approach, when incorporated with a Poisson process, is resulting sparing demand inflation over time. To illustrate 
this characterization we can project out in time using the hypothetical ORU presented in Section IV and identify the 
necessary number of spares needed to reach a 95% POS target. For a projection beginning in 2012, with the one 
baseline spare, at this target level, one additional spare is needed through 2016. Two additional spares are needed 
through 2021. This number increases to 3 additional spares through 2028. Whereas, the expected number of failures 
through 2016, 2021, and 2028 is 0.44, 0.88, and 1.49 failures, respectively. 
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When the ORU target POS remains constant, the trade-off is clear; we identify needing a number of spares that 
may exceed any reasonable expectation of the number of failures that will actually be observed. This effect becomes 
more pronounced as the time horizon increases. When supplementing program decision-making for hardware 
investment, this may reduce the usefulness of sparing assessment results. Program management must rely on expert 
engineering judgment. This situation ultimately cannot nor should it be entirely eliminated. However, using an 
approach similar to PACT Evaluation, we are able to vary our confidence levels and thus improve the utility of the 
sparing assessment results. It may be appropriate and useful to coordinate with Program Management and the 
System teams to accept for instance near, mid, and long -term targets for both ORU POS and the confidence level. 
Figure 8 illustrates the following example levels: 90% POS and confidence in the near-term, 75% POS and 
confidence in the mid-term, and 60% POS and confidence in the long-term. 


ORU POS by year, WITH 60%, 75%, 90% CONFIDENCE ESTIMATES 



30 % 
— 75 % 
50 % 


Figure 8. Generic ORU time-series with varying near, mid, and long-term probability and confidence targets. Figure 
shows what number of ‘ events’ sparing quantities should cover to meet the targets: 90/90 TARGET: 1.36 events / 1 
additional spare, 75/75 TARGET: 1.02 events/ 1 additional spare, 60/60 TARGET: 0.91 events / no additional spares 
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We expect the values for ORU POS and confidence not to focus only on time. We should expect discussion to 
consider for instance ORU criticality, redundancy, the ability to recover the system in event of ORU failure, and 
other contingencies. A dynamic approach to setting POS and confidence levels provides a consistent result per ORU 
in terms of a sparing assessment. In the above example, L&M will provide a sparing projection in the near-term of 
needing a total of 2 spares, compared to a mid-term projection of 2 spares, and a long-term projection of 1 spare. 
When introduced to PACT evaluation, L&M has also considered an alternative approach to setting targets in the 
probability/confidence trade-space. It may be more appropriate to hold the ORU POS constant over time and instead 
relax only our confidence in the estimate. The reasoning is that longer time horizons exhibit greater epistemic 
uncertainty in the true ORU failure rate. Consider the sensitivity, Figure 9, case where we hold 90% POS fixed 
throughout the near, mid, and long-term projection. 


ORU POS by year, WITH 60%, 75%, 90% CONFIDENCE ESTIMATES 



Figure 9. Generic ORU time-series with varying near, mid, and long-term confidence targets and fixed 
probability. Figure shows what number of ‘events ’ sparing quantities should cover to meet the targets: 90/90 TARGET: 
1.36 events / 1 additional spare, 90/75 TARGET: 1.79 events / 1 additional spare, 90/60 TARGET: 2.31 events / 2 

additional spares 


We fully expect the exact targets for ORU POS and confidence to change according to function, and possibly on 
an ORU basis. We have noted the dramatic impact in accounting for epistemic uncertainty when establishing 
probability and confidence levels given projection in time. How does the PACT Evaluation represent our risk 
posture should our level of certainty in the ORU failure rate increase? The following data illustrates this aspect. 

An alternative sensitivity case demonstrates the same sparing assessment for the hypothetical ORU; only 
decreased epistemic uncertainty is represented by lowering the EF from 4 to 1.5. In the near-term, only 0.87 events 
are needed to be covered by a spare. The analysis indicates the existing spare is sufficient. In the mid-term, 1.67 
events are projected, indicating demand for one additional spare. In the long-term, the number of events increases to 
2.69, requiring 2 additional spares. The decreased uncertainty does not necessarily result in a consistent trend over 
time. Using PACT Evaluation, we can adjust our sparing recommendation according to our level of uncertainty in 
the ORU failure rate. 
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VII. Conclusion 

When introducing PACT Evaluation, we define and account for the epistemic uncertainty characterizing ISS 
sparing assessments to more accurately represent the true risk of sparing for the ISS. We acknowledge what we can 
realistically know about an ORU’s true failure rate given the various methods used to predict ORU reliability. We 
describe how the lack of complete knowledge directly relates to our perceived risk in vehicle sustaining plans. We 
have reviewed the current approach developed by L&M for conducting sparing assessments. The approach takes the 
latest Bayesian update in ORU failure rate, and applies a POS value given a number of spares. When applying high 
confidence levels, this approach results in inflation of the number of spares to meet a target when the target does not 
change over time. Furthermore, we cannot explicitly calculate our epistemic uncertainty. Instead, we introduce that 
by adopting a Lognormal process we are able to integrate the ORU Posterior EF from the Bayesian process to assess 
a level of confidence in the ORU POS estimate. This defines the trade-space inherent to the PACT Evaluation 
approach and thus we measure our epistemic uncertainty. We can also control the POS and confidence levels for 
sparing assessments. We would like to add mention of our investigation into the meaning of a combined unit of 
Probability and Confidence where a single measure of the area under the curve (see ‘Area of Sufficiency’ Figure 5, 
Section IV) may indicate epistemological probability within the tradespace. This line of work is on-going. 

Our near-term work is to recommend new targets to the ISS community. This work includes the following key 
areas: 


• For a given component or group of components or spares, trading a target probability of sufficient spares 
with the confidence in that target probability. 

• Once that trade is complete defining the recommended POS and confidence for a component and/or 
group of components. 

• Setting unique POS and confidence targets as a function of time horizon. For example if the time to turn 
on a supplier is long for a critical component you would be less willing to relax the POS than for a less 
critical component or spare that can be easily manufactured or even substituted. 

• Making recommendations on the number of spares required once the target POS and confidence has been 
set and representing and communicating the risk to the stakeholders. 

Our research to date has not addressed assessing ORUs modeled in a functional hierarchy. In such cases we 
understand epistemic uncertainty propagates throughout the modeled systems. We have tools to do so and look 
forward to further developing this evaluation method to achieve our goal: to model every ISS ORU accounting for 
epistemic uncertainty to provide the program the best representation of sparing demand and better sustain the 
vehicle through 2020 and beyond. 

PACT is a useful methodology and has been proposed to supplement ISS sparing analysis. As with the current 
process, PACT Evaluation should be input to extensive coordination with expert and program stakeholders for 
decision-making. Preliminary results indicate a valuable trade space for selecting probability of sufficiency and 
confidence targets. 
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Appendix A - Six ORU Case Study Results Charts 


ORU Selection Criteria for Case Study 

1 Selected ORU 

ORU Function 

Rationale for Selection 

Remote Power 
Control 
Mechanism 
(RPCM T5 Ext) 

The RPCM receives commands and transmits data via an 
internally redundant MIL-STD-1553B Data Bus. Type 5 
will function as a remote high power switching ORU 
module consisting of two 12 AMP switching and sixteen 
3.5 AMP switches. Each switch will provide short circuit 
and overload shutdown. 

Large population of 
installed units and spares 
providing rich operational 
experience including 
failures and redesign 

Improved 
Payload 
Ethernet Hub 
Gateway 
(IPEHG) 

IPEHG is an ORU replacement for the existing Payload 
Ethernet Hub/Gateway (PEHG). 

Small internal ORU, no 
operational experience 

Pump Module 

Assembly 

(PMA) 

The primary function of the Pump Module is to circulate 
liquid ammonia around the thermal loops (ETCS) for 
acquisition of heat loads. 

Large external ORU, 
critical hardware with 
many hours of operation 
and a random failure 

Hydrogen 

Dome 

It is contained in a dome, operates near vacuum, and is 
designed to contain fire or explosion in cell stack. The 
hydrogen dome also provides second barrier to hydrogen 
leakage. 

Large internal ORU, no 
redundancy, relatively little 
operational experience 

Solar Array 
Rotary Joint 
Drive Lock 
Assembly Drive 
Lock Assembly 
(SARJ-DLA) 

The DLA continuously positions the panels as directed by 
the Rotary Joint Motor Controller (RJMC). The DLA 
consists of the drive motor assembly (DMA), and the 
engage/disengage mechanism (EDM). 

External ORUs with 
redundancy, similar 
function differing failure 
rates, SARJ DLA modeled 
in the Usable Power 
function hierarchy 

Thermal 
Radiator Rotary 
Joint Drive 
Lock Assembly 
Drive Lock 
Assembly 
(TRRJ-DLA) 

The TRRJ DLA continuously positions the radiator panels 
as directed by the Rotary Joint Motor Controller (RJMC). 
The DLA consists of the drive motor assembly (DMA), and 
the engage/disengage mechanism (EDM). 

External ORUs with 
redundancy, similar 
function differing failure 
rates, TRRJ DLA modeled 
as a separate ORU 
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Sufficency 


Epistemic Uncertainty/Accepted Risk 


Error Factor 1 (Poisson) 


Error Factor 1.36 


IPEHG: PACT Evaluation 
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Pump Module: PACT Evaluation 



Confidence in Probability of Sufficiency (Failures < Spares) 

Sufficency Epistemic Uncertainty/Accepted Risk Error Factor 1 (Poisson) Error Factor 2.61 


Hydrogen Dome: PACT Evaluation 



Confidence in Probability of Sufficiency (Failures < Spares) 

Sufficency Epistemic Uncertainty/Accepted Risk Error Factor 1 (Poisson) Error Factor 3.13 
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SARJ DLA: PACT Evaluation 
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Sufficency 


Confidence in Probability of Sufficiency (Failures < Spares) 

tEpistemic Uncertainty/Accepted Risk Error Factor 1 (Poisson) 


Error Factor 4 


TRRJ DLA: PACT Evaluation 



Confidence in Probability of Sufficiency (Failures < Spares) 

Sufficency - - -Epistemic Uncertainty/Accepted Risk Error Factor 1 (Poisson) Error Factor 4 
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Appendix B - Acronyms 


EE 

ISS 

L&M 

NASA 

ORU 

PACT 

POS 


error factor 

International Space Station 

Logistics and Maintenance 

National Aeronautics and Space Administration 

Orbital Replacement Unit 

Probability and Confidence Trade-space 

probability of sufficiency 
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